Program Sikkerhetsfestivalen 2026

Offensive Security

Role Confusion in DNS

Tirsdag 1 · Frimurerlosjen, rom 2

EnglishDeep-dive 40 min

Erlend Leiknes

Erlend Leiknes

Cybersecurity researcher

Erlend is a man of many towels—a security consultant, red team operator, kubestronaut, electrical engineer, civil engineer in technical societal safety, and retired bus driver. With a balanced mix of technical know-how and practical experience, he offers thoughtful insights into security and technology. And in the spirit of Douglas Adams, there's no need to panic.

Novel attack on the DNS protocol that may expose your internal DNS infrastructure to the internet.

In this talk I will present my latest research on a previously undisclosed issue in the DNS protocol.

WARNING: may lead to DNS poisoning.

  1. Your Agents Have Trust Issues: Securing AI in the "Wild West" of LLMs 1 · Frimurerlosjen, rom 1
  2. Riv PKIene 10 · HeartBox ,Teatersalen
  3. Security at Scale: Lessons learned from Equinor’s Security Configuration Initiative 10 · HeartBox, Byscenen
  4. Digitale spøkelser: KI agenter uten kontroll i norske virksomheter 11- Breiseth, Storlon
  5. OT-sikkerhet i matbransjen – noen erfaringer 2 · Home hotel Hammer, moen nede
  6. Sertifiseringen deres stopper meg ikke i døra! - Fysisk sikkerhet fra papir til praksis 2 · Home hotel Hammer, moen oppe
  7. Ingunn Nesheim 3 · Hvelvet, Gullsalen
  8. Fra kontroll til samarbeid: Slik bygger vi reell sikkerhet i leverandørrelasjoner 4 · Kommunestyresalen, Lillehammer rådhus
  9. Vet du hvor mange som jobber for deg? AI-agenter som risiko og en styringsmodell som virker 5 · Kulturhuset Banken, Expedisjon
  10. Cyberoperasjoner som sikkerhetspolitisk virkemiddel 5 · Kulturhuset Banken, Festsalen
  11. AI-empowered Digital Twin-based Security Orchestration, Automation and Response 5 · Kulturhuset Banken, Holbøsalen
  12. Cloud Forensics: Challenges and Best Practices 5 · Kulturhuset Banken, Kafeen
  13. Slutt å late som du jobber risikobasert! 6 · Lillehammer kino, sal 2
  14. The Average Employee Doesn’t Exist: Measuring Security Culture in Practice 6 · Lillehammer kino, sal 4
  15. State of the Union: AI in Security 2026 7 · Microbryggeriet
  16. Nobody Cares About Your Intel (Until They Do): Lessons from Building CTI That Sticks 9 · Victoria Scandic, sal 1+2
  17. Phishing dekonstruert: Hva virker og hva kan vi lære av det? 9 · Victoria Scandic, sal 3